> This hole has been open for how long? And yet, no terrorist attacks. Typically when a website is hacked it isn't because they opened up a vulnerability the d

> This hole has been open for how long? And yet, no terrorist attacks. Typically when a website is hacked it isn't because they opened up a vulnerability the day before, it too has been around a while before anyone malicious found it. The rest of your argument is all about the general security theatre situation, where yes, I agree they are going over the top against very little threat. My point was that, given this policy, they had two choices here - either close the security hole ASAP, or say "to be honest, this whole security thing's a bit of a joke, let's all go home".